CVS commit: pkgsrc/www/squidGuard

[Takahiro Kambe <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sat Oct 17 01:50:39 UTC 2009

Modified Files:
        pkgsrc/www/squidGuard: Makefile distinfo

Log Message:
Add official patch-20091015, quote from Readme.Patch-20091015.

Bump PKGREVISION.

Introduction:
=============

This patch fixes one buffer overflow problem in sgLog.c when overlong URLs
are requested. SquidGuard will then go into emergency mode were no blocking
occurs. This is not required in this situation.
The URLs must be build with a overlong sequence of slashes (/).

ATTENTION:  While squidGuard will no longer go into emergeny mode when one
overlong URL is passed to it, it is possible to use the overlong URL to
bypass the filter. This vulnerability is not fixed by this patch!
You can check if this vulnerability is actually exploited on your system
by checking the logfile squidGuard.log for the following warning (provided
you have not used the option --with-nolog=yes with configure before compiling
squidguard):

Warning: Possible bypass attempt. Found multiple slashes where only one is 
expected:


To generate a diff of this commit:
cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/squidGuard/Makefile
cvs rdiff -u -r1.6 -r1.7 pkgsrc/www/squidGuard/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.